185
WhatsApp provides no cryptographic management for group messages (arstechnica.com)
submitted 1 week ago by themachinestops@lemmy.dbzer0.com to c/technology@lemmy.world
15 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[-] Bahnd@lemmy.world 5 points 1 week ago

Or Matrix (warning some assembly required)

[-] new_guy@lemmy.world 17 points 1 week ago

WhatsApp isn’t the only messenger lacking cryptographic assurances for new group members. In 2022, a team that included some of the same researchers that analyzed WhatsApp found that Matrix—an open source and proprietary platform for chat and collaboration clients and servers—also provided no cryptographic means for ensuring only authorized members join a group. The Telegram messenger, meanwhile, offers no end-to-end encryption for group messages, making the app among the weakest for ensuring the confidentiality of group messages.

[-] Bahnd@lemmy.world 9 points 1 week ago

That study was 3 years ago, features to create private (invite only) group chats are supported now.

[-] sem 3 points 1 week ago

How can matrix be insecure when it keeps locking me out of my own messages?

[-] coconut@programming.dev 1 points 1 week ago

an open source and proprietary platform

Are parts of matrix closed source?

[-] Vanilla_PuddinFudge@infosec.pub 8 points 1 week ago

I actually found xmpp to be a breeze compared to most Matrix solutions.

Synapse is bloated, dendrite sucks and conduit is in perpetual beta and the uwu forks die too fast.

XMPP:

  1. Install Snikket
  2. Reverse proxy
  3. Done
this post was submitted on 08 May 2025
185 points (100.0% liked)

Technology

70048 readers
3354 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
L4s@hackingne.ws